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Top Stories 

• Officials indicted 2 men October 14 for skimming $709,597.50 from 1,329 ATM accounts 
at multiple bank locations in Rhode Island and Connecticut. - Warwick Post (See item 2 ) 

• CSX Transportation shut down its major rail terminal in Tennessee due to changing 
business environment and to significantly reduce coal traffic in the area October 15. - 
Knoxville News Sentinel (See item 7) 

• Officials reported October 16 that a Kosovo citizen will be extradited to the U.S. for 
allegedly hacking into a U.S. -based company and stealing information of 1,351 
government personnel. - Associated Press (See item 17 ) 

• Four New York franchisees of Papa John’s International Inc., agreed to pay $500,000 in 
back wages and damages to about 250 employees October 15 after an investigation 
revealed the company violated payment minimum wages and overtime. - Reuters (See item 
26 ) 
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Energy Sector 



1. October 16, KSAT 12 San Antonio - (Texas) Pipeline explosion in Encinal causes 
school closure. An October 16 explosion and fire at a Lewis Energy Group-owned 
pipeline in Encinal, Texas, prompted the closure of Encinal Elementary School while 
crews worked to contain the fire. No injuries were initially reported and the cause of 
the explosion is under investigation. 

Source: http://www.ksat.com/news/oil-rig-explosion-in-encinal-texas 

Chemical Industry Sector 

Nothing to report 

Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 

Critical Manufacturing Sector 

Nothing to report 

Defense Industrial Base Sector 

Nothing to report 

Financial Services Sector 

2. October 15, Warwick Post - (Rhode Island; Connecticut) Feds pursue Greenwood 
Credit Union ATM skimmer in Ecuador. U.S. officials indicted 2 New York men 
October 14 on charges that they skimmed $709,597.50 from 1,329 ATM accounts at 
Greenwood Credit Union, Bank Newport, First Niagra Bank, and Fairfield City Bank 
locations in Rhode Island and Connecticut. Authorities are seeking to extradite one of 
the men from Ecuador. 

Source: http://warwickpost.com/feds-pursue-greenwood-credit-union-atm-skimmer-in- 
ecuador/9441/ 



Transportation Systems Sector 

3. October 16, WNEP 16 Scranton - (Pennsylvania) All lanes of 1-80 east now open 
after fatal crash. Interstate 80 east near Danville was shut down for several hours 
October 16 while crews cleared the scene after a semi-truck struck a tractor-trailer 
parked on the side of the roadway, killing the driver. 

Source: http://wnep.com/2015/10/16/fatal-crash-shuts-down-i-80-east-near-danville/ 

4. October 16, KRON 4 San Francisco - (California) Big- rig accident causes multiple 
cars to crash, NB 1-680 at standstill Walnut Creek. Three southbound lanes of 
Interstate 680 in Walnut Creek reopened October 16 and northbound lanes remained 
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closed for several hours while crews cleared the scene of a fiery multi-vehicle accident 
that involved at least 6 cars and injured 1 person. 

Source: http://kxon4.com/2015/10/16/big-rig-fire-is-causing-a-blockage-of-nb-680-at- 
hwy-24-in-walnut-creek/ 



5. October 16, KABC 7 Los Angeles - (California) 5 Freeway shut down on both sides 
due to mud flow. The northbound and southbound lanes of the 5 Freeway in Los 
Angeles remained closed October 15 and are expected to remain closed overnight while 
crews worked to clear mud that was caused by recent severe storms in the area. 
Highway 58 and sections of Highway 14 were also shut down as a result of the storm 
and mud. 

Source: http://abc7.com/news/5-north-shut-down-at-fort-teion-due-to-mud- 
flow/1035425/ 

6. October 15, WSVN 7 Miami - (Florida) All lanes re-opened on 1-75 north in Weston 
after rollover crash cleared. Interstate 75 northbound near Royal Palm Boulevard in 
Weston was shut down for about 8 hours after a semi-truck hauling chlorine overturned 
and spilled the chemical onto the roadway, prompting HAZMAT crews to respond to 
the scene. 

Source: http://www.wsvn.com/storv/30268859/i-75-nb-shutdown-following-rollover- 
crash-in-weston 

7. October 15, Knoxville News Sentinel - (Tennessee) CSX shuts down Erwin terminal, 
cuts 300 jobs in mountain community. CSX Transportation reported October 15 that 
it shut down its major rail terminal in Erwin, Tennessee, including a locomotive service 
center and a car shop due to changing business environment, and to significantly reduce 
coal traffic through the region. 

Source: http://www.knoxnews.com/business/csx-shuts-down-erwin-terminal-cuts-300- 
jobs-in-mountain-community 24806219 

For another story, see item 13 

Food and Agriculture Sector 

8. October 15, U.S. Food and Drug Administration - (National) Del Monte Fresh 
Produce N.A. Inc., recalls limited quantity of fresh apples due to possible health 
risk. Del Monte Fresh Produce N.A., Inc., issued a voluntary recall October 14 for its 
Granny Smith green apples after a customer performed microbial testing on raw apples 
and found positive traces of Listeria monocytogenes. The products were distributed to 
Coremark and 7 -Eleven to be sold in convenience stores in several States. 

Source: http://www.fda.gov/Safety/Recalls/ucm467078.htm 

9. October 15, U.S. Food and Drug Administration - (National) Del Monte Fresh 
Produce N.A. Inc. recalls limited quantity of “Fresco Fresh” brand parfait yogurt 
cups due to undeclared tree nut allergen. Del Monte Fresh Produce N.A., Inc., issued 
a voluntary recall for its “Fresco Fresh” brand parfait yogurt cups October 14 after 
routine retained- sample inspection revealed misbranding and undeclared almonds. The 
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product was distributed to a limited number of customers in North Carolina, South 
Carolina, and Virginia. 

Source: http://www.fda.gov/Safety/Recalls/ucm467109.htm 

10. October 15, U.S. Food and Drug Administration - (New York) A&S Food Trading 
Inc issues alert on undeclared sulfites in Gorgeous Memory Daylily. Brooklyn, 

New York-based A&S Food Trading Inc., recalled its 10.6 ounce clear plastic bag 
packages of Gorgeous Memory Daylily August 28 after routine sampling and 
subsequent analysis revealed the presence of undeclared sulfites. The products were 
distributed in New York City areas through retail stores. 

Source: http ://ww w .fda. gov/S afety/Recalls/ucm467 173 .htm 

11. October 15, U.S. Department of Labor - (Michigan) OSHA cites Aspen Foods after 
machine takes part of worker’s finger. The Occupational Safety and Health 
Administration citied Chicago-based Koch Foods Inc., while conducting business at 
Aspen Foods Inc., October 15 for 1 repeated and 4 serious safety violations including 
failure to post essential procedural information in Spanish, and lack of training on 
safety procedures to prevent exposure to operating parts, among other violations, 
following an April 1 8 accident in which an employee lost his finger while clearing a 
paper jam. Proposed penalties total $52,500. 

Source: 

https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RELEA 
SES&p id=28908 

12. October 15, U.S. Department of Labor - (Ohio) Agricultural manufacturer exposes 
workers to amputation, other safety hazards. The Occupational Safety and Health 
Administration cited the Ohio-based Bellevue Manufacturing Company of agricultural 
oil filters for 19 serious and 1 other- than-serious safety and health violations including 
fall hazards, confined space hazards, and machine hazards October 14 after a March 
complaint investigation revealed employees were exposed to several safety hazards. 
Proposed penalties total $112,500. 

Source: 

https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RELEA 
SES&p id=28905 

Water and Wastewater Systems Sector 

13. October 16, Rogersville Review - (Tennessee) State-contracted mower causes 5,000- 
gal. sewer spill in Surgoinsville. An estimated 5,000 gallons of sewage spilled into 
Surgoinsville Creek and ran into the Holsten River at Surgoinsville October 13 after a 
tractor operation for a North Carolina firm providing right-of-way mowing services for 
the Tennessee Highway Department accidentally ran into a box containing a sewer 
pressure-release valve. The contractor left the scene without informing authorities and 
no charged have been filed at the time. 

Source: http://www.therogersvillereview.com/news/article 75849562-7412-1 Ie5-9d78- 
3b4e3f6eal50.html 
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14. October 16, Charlotte Observer - (South Carolina) Raw sewage spills into Neal 
Branch Creek. About 3,750 gallons of raw sewage spilled into Neal Branch Creek in 
Charlotte October 15 due to a sanitary sewer blockage. Officials reported that products 
labeled as “flushable” do not break down in the sewer system and can cause clogging. 
Source: http://www.charlotteobserver.com/news/local/article39388734.html 

15. October 15, WLOX 13 Biloxi - (Mississippi) Sewage leak closes section of Biloxi 
beach. The Mississippi Department of Environmental Quality closed a section of beach 
in Biloxi October 15 until bacteria levels reach a safe level following a force main 
break that sent sewage spewing into the Mississippi Sound. The city repaired the leak 
and is working to repair the system. 

Source: http://www.msnewsnow.com/storv/30270201/sewage-leak-closes-section-of- 
biloxi-beach 



Healthcare and Public Health Sector 

16. October 15, WBAL 11 Baltimore - (Maryland) DPW worker splashed with chemical 
prompting 2 hazmat situations. The emergency room at Mercy Medical Center in 
Baltimore was closed for 3 hours as a precaution October 15 after a Department of 
Public Works employee was splashed with a potentially hazardous material following a 
trash compactor explosion. The emergency room was shut down to limit the exposure 
of the worker to others before the worker was transferred to Johns Hopkins Bayview 
Medical Center for treatment. 

Source: http://www.wbaltv.com/news/crews-on-scene-of-2-hazmat- 
situations/35858080 



Government Facilities Sector 



17. October 16, Associated Press - (International) Officials: Hacker who ID’d U.S. 
military members for ISIS arrested. The U.S. Department of Justice reported 
October 16 that a Kosovo citizen will be extradited to the U.S. from Malaysia for 
allegedly hacking into the computer systems of a U.S. -based company and stealing the 
personal information of 1,351 U.S. military and other government personnel in order to 
share it with ISIS militants between June and August 2015. The suspect is believed to 
be the leader of the Kosova Hacker’s Security Internet hacking group. 

Source: http://abcl3.com/news/officials-hacker-who-idd-us-military-members-for-isis- 
arrested/1035894/ 

18. October 16, Associated Press - (Utah) Utah state capitol evacuated after man leaves 
wreath, box containing rifle on floor. The Utah State Capitol Building in Salt Lake 
City was evacuated for several hours October 15 while police cleared the scene after a 
man was seen placing a wreath and cardboard box containing an unloaded rifle on the 
floor of the building before exiting. The package was deemed harmless and authorities 
are searching for the man. 

Source: http://www.foxnews.com/us/2Q15/10/16/utah-state-capitol-evacuated-after- 
man-leaves-wreath-box-containing-rifle-on/ 
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19. October 15, KBAK 29 Baker sfield/KBFX 58 Bakersfield - (California) Tehachapi 
schools closed due to power outages. A power outage caused by storms October 14 
impacted 1,700 customers in the Tehachapi/Bear Valley Springs area and prompted the 
closure of all schools in the Tehachapi Unified School District October 15. 

Source: http://www.bakersfieldnow.com/news/local/Tehachapi-schools-closed- 
333031661.html 

20. October 15, Paterson Press - (New Jersey) Paterson’s School 4 to remain closed on 
Friday after fire damages classroom. An October 15 fire prompted the evacuation of 
School 4 in Paterson, New Jersey, and the school’s closure October 16 due to smoke 
and fire damage. Officials reported that crews will work to clean and repair the facility 
through the weekend of October 17. 

Source: http://www.northiersev.com/news/paterson-s-school-4-to-remain-closed-on- 
friday-after-fire-damages-classroom- 1 .1433450 

For another story, see item 1 

Emergency Services Sector 

Nothing to report 

Information Technology Sector 

21. October 16, Securityweek - (International) Critical flaw patched in Akismet plugin 
for WordPress. Automattic released an update for the Akismet WordPress plugin 
versions 3.1.4 and earlier after security researchers from Sucuri discovered a cross-site 
scripting (XSS) vulnerability in the plugin that could allow an unauthenticated attacker 
to insert malicious code into the WordPress administration panel’s comments area by 
using emoticons. 

Source: http://www.securitvweek.com/critical-flaw-patched-akismet-plugin-wordpress 

22. October 16, Securityweek - (International) Nuclear EK generates Flash exploits on- 
the-fly to evade detection. Security researchers from Morphisec discovered that the 
Nuclear exploit kit (EK) is generating different variations of an Adobe Flash exploit 
on-the-fly throughout the day and changing host Web sites that victims are being 
directed to hourly in an effort to bypass detection. The EK also tracks victims’ Internet 
protocol (IP) addresses to prevent the same exploit combination being served to the 
same victim twice. 

Source: http://www.securityweek.com/nuclear-ek-generates-flash-exploits-flv-evade- 
detection 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT IS AC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 



Nothing to report 

Commercial Facilities Sector 

23. October 16, Tech Times - (National) Uber accidentally leaks personal information 
of hundreds of U.S drivers. Uber Technologies Inc., reported October 16 that the 
personal information of 674 drivers, included driver’s license scans, Social Security 
numbers, and tax forms, among other confidential data was accidentally leaked October 
13 from the new Uber Partner app designed to provide service information to the 
company about its drivers. Uber resolved the issue and alerted drivers of the breach 
through online forums such as Reddit. 

Source: http ://w w w .techtimes .com/articles/95 6 17/20 15101 6/uber-accidentally-leaks- 
personal-information-of-hundreds-of-us-drivers.htm 

24. October 16, SC Magazine - (National) Payment card breach at Peppermill Resort 
Spa Casino in Reno. Officials reported October 16 that a breach at the front desk of 
the Reno, Nevada-based Peppermill Resort Spa Casino may have compromised an 
undisclosed number of individuals’ personal information, including card numbers, 
expiration dates, and credit card security codes from October 2014 — February 2015. 
Peppermill Resort Spa Casino implemented new policies and procedures to mitigate 
future incidences. 

Source: http://www.scmagazine.com/pavment-card-breach-at-peppermill-resort-spa- 
casino-in-reno/article/447433/ 



25. October 15, Rochester Time Warner Cables - (New York) Macedon man accused of 
stealing tens of thousands of dollars worth of computer tablets. Gates police 
arrested and charged a former Integron employee October 13 with third-degree grand 
larceny after allegedly stealing 115 Apple iPads and 30 Samsung Galaxy tablets from 
his workplace in New York. The culprit reportedly blamed drug addiction as the motive 
behind the theft. 

Source: http://www.twcnews.com/nys/rochester/news/2015/10/15/gates-tablet-theft- 
grand-larceny.html 

26. October 15, Reuters - (New York) Papa John’s four NY franchisees to pay $500,000 
in back wages. Four New York franchisees of Papa John’s International Inc. agreed to 
pay $500,000 in back wages and damages to about 250 employees October 15 after an 
investigation lead by the New York attorney general and the U.S. Department of Labor 
found the franchisees violated payment minimum wages and overtime, as well as basic 
labor law protections. 

Source: http://www.reuters.com/article/2Q15/10/15/papa-iohns-wages- 
idUSLlN12F17620151015 
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Dams Sector 



Nothing to report 





NTAS 



NO ACTIVE ALERTS 
wwvv.DHS.gov/alerts 



Department of Homeland Security (DHS) 

DHS Daily Open Source Infrastructure Report Contact Information 

About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday 
through Friday] summary of open-source published information concerning significant critical 
infrastructure issues. The DHS Daily Open Source Infrastructure Report is archived for 10 days on 
the Department of Homeland Security Web site: http://www.dhs.gov/lPDailvReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support@govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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